Merge nucleic/nimble-umber-toad-20h7 into dev

This commit is contained in:
2026-08-11 20:11:26 -07:00
parent 50e2b9030b
commit 05d993d83b
5 changed files with 24 additions and 24 deletions
+4 -4
View File
@@ -340,7 +340,7 @@ public sealed class WslcFacade : IWslc
}
}
/// <summary>`ghcr.io/abkslm/naros-agent:26.07` → `https://ghcr.io`. A ref whose first segment
/// <summary>`ghcr.io/abkslm/hydrangeaos-agent:26.07` → `https://ghcr.io`. A ref whose first segment
/// carries no dot or port has no registry host at all (`ubuntu:24.04`), which means Docker
/// Hub.</summary>
private static Uri RegistryUri(string reference)
@@ -503,7 +503,7 @@ public sealed class WslcFacade : IWslc
/// the guest's own cgroup v2 files, read the way a Linux-native engine would (§13.1 finding 2).
///
/// Deliberately `cat` and `echo` only: no awk, no sed. This runs in whatever image the user
/// configured, and nash is `/bin/sh` in narOS — the smaller the tool surface, the fewer images
/// configured, and hydrashell is `/bin/sh` in hydrangeaOS — the smaller the tool surface, the fewer images
/// this silently fails in.
/// </summary>
public async Task<ContainerStatsInfo?> ContainerStatsAsync(string name, CancellationToken ct)
@@ -596,7 +596,7 @@ public sealed class WslcFacade : IWslc
/// <summary>
/// <c>ProcessSettings</c> has no <c>UserId</c>/<c>GroupId</c>, so dropping to the agent uid is
/// done in-guest by wrapping argv — the fallback §3.2 always named, which costs nothing
/// because the interceptors and nash never look at the numeric uid.
/// because the interceptors and hydrashell never look at the numeric uid.
///
/// argv is passed to `setpriv` directly rather than through a shell, so nothing here can be
/// quoted wrong or injected into.
@@ -615,7 +615,7 @@ public sealed class WslcFacade : IWslc
WslcError.Unsupported,
$"cannot drop to uid {uid} in this image: it has no util-linux `setpriv` "
+ "(BusyBox ships a `setpriv` that does not support --reuid). Use an image with "
+ "util-linux, as the narOS agent image does — refusing to run as root instead.");
+ "util-linux, as the hydrangeaOS agent image does — refusing to run as root instead.");
return
[